diff --git a/hosts/neodymium/home/packages.nix b/hosts/neodymium/home/packages.nix
index de1e2c2..01f4046 100644
--- a/hosts/neodymium/home/packages.nix
+++ b/hosts/neodymium/home/packages.nix
@@ -1,11 +1,4 @@
-{ pkgs, lib, ... }: {
-  nixpkgs.config.allowUnfreePredicate = pkg:
-    builtins.elem (lib.getName pkg) [
-      "vscode-insiders"
-      "vscode-extension-github-copilot"
-      "vscode-extension-ms-vsliveshare-vsliveshare"
-    ];
-
+{ pkgs, ... }: {
   services.mpris-proxy.enable = true; # media keys
 
   home.packages = with pkgs; [
diff --git a/hosts/neodymium/system/nix/default.nix b/hosts/neodymium/system/nix/default.nix
index e6bc9ec..fd909bb 100644
--- a/hosts/neodymium/system/nix/default.nix
+++ b/hosts/neodymium/system/nix/default.nix
@@ -1,4 +1,4 @@
-{ ... }: {
+{ lib, ... }: {
   # restrict nix command to sudoers
   nix.settings.allowed-users = [ "@wheel" ];
 
@@ -15,9 +15,19 @@
     options = "--delete-older-than 30d";
   };
 
+  # binary caches
   nix.settings = {
     substituters = [ "https://hyprland.cachix.org" ];
     trusted-public-keys =
       [ "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc=" ];
   };
+
+  # list of allowed unfree packages
+  nixpkgs.config.allowUnfreePredicate = pkg:
+    builtins.elem (lib.getName pkg) [
+      "vscode"
+      "vscode-extension-github-copilot"
+      "vscode-extension-github-copilot-chat"
+      "vscode-extension-ms-vsliveshare-vsliveshare"
+    ];
 }